Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
File:                     1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft (raw, json)
Hash identifier:          5WCUdFqKdMtJ2PmOwTP/WaCdw0b+cqiQcioaI0K65yg=
Subject key identifier:   82:85:27:2E:65:FD:1E:14:67:35:B5:29:7E:B8:33:2D:79:DB:FB:43
Authority key identifier: D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E
Certificate issuer:       /CN=A911A70E/serialNumber=D439EED60D319709872474B90706630473B6DE5E
Certificate serial:       01F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
Manifest number:          01EB
Signing time:             Sat 23 Aug 2025 02:47:21 +0000
Manifest this update:     Sat 23 Aug 2025 02:47:21 +0000
Manifest next update:     Sat 30 Aug 2025 02:47:21 +0000
Files and hashes:         1: 1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl (hash: UGmH9S5QAJmDlGko3QAp5dNo5O62BiHjriL5IljE21Q=)
                          2: 5169DA6EA05D11ED9406DE26C4F9AE02.roa (hash: ubMDKoV/0Mf8cskkFN+EzNxMhabm1KL1nBOoaD8bcg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl
                          rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 02:47:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A70E, serialNumber=D439EED60D319709872474B90706630473B6DE5E
        Validity
            Not Before: Aug 23 02:47:21 2025 GMT
            Not After : Aug 30 02:47:21 2025 GMT
        Subject: CN=68a92bb9-9676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a4:2b:c8:ee:20:df:c1:b1:86:32:d4:00:7b:
                    a5:62:52:e1:55:b5:12:50:46:55:48:ad:b9:9e:64:
                    78:0e:54:e8:15:1f:5e:c2:5b:11:91:57:b6:2c:38:
                    b5:3a:c8:8d:15:4d:1e:9d:f6:27:6a:d9:cf:2c:68:
                    7b:87:ab:c2:fc:f6:0b:0c:30:99:85:6d:e4:7a:d3:
                    fe:d3:98:ac:6c:8d:8a:7b:1d:f3:b1:55:4a:f1:8d:
                    d0:17:52:4b:38:24:2c:94:d1:9b:e0:dc:e9:5e:db:
                    a8:ad:0f:27:2c:a1:84:75:19:bd:ea:a9:9c:c2:98:
                    aa:6b:58:e9:ee:dd:47:54:aa:ac:0d:9b:87:6a:91:
                    87:3e:1b:ab:38:59:b7:ec:77:3b:31:e3:51:29:7d:
                    cb:14:62:81:90:9f:b8:94:f8:c4:eb:91:c4:43:8d:
                    e4:c8:ed:95:87:04:13:65:67:23:4f:9d:ac:80:ff:
                    e5:63:8f:a9:a9:41:00:92:ce:02:aa:53:37:d0:53:
                    c7:bb:ce:f5:d7:86:46:92:cd:9f:b4:de:e0:a5:3e:
                    70:04:4d:5d:70:82:16:3b:e3:d0:b1:19:dd:fe:6b:
                    b7:62:cf:99:be:1f:d0:64:8c:b9:45:57:11:c0:f6:
                    2d:53:2a:ea:b7:62:7d:c5:1b:28:5b:da:74:62:c1:
                    7f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:85:27:2E:65:FD:1E:14:67:35:B5:29:7E:B8:33:2D:79:DB:FB:43
            X509v3 Authority Key Identifier:
                keyid:D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:b3:a7:93:32:d9:7d:81:71:1a:be:10:64:25:27:6e:b7:bd:
         6c:88:8e:8d:f5:69:d4:b3:2d:04:ba:72:fd:5a:9b:6c:85:e3:
         53:d0:1d:83:06:46:ae:b1:ee:29:7f:34:e3:81:68:2a:6b:70:
         61:a1:e6:bd:70:45:8b:fd:1e:89:c5:92:06:6a:67:34:a4:c1:
         9e:d0:f9:ad:9a:23:ed:a8:d0:eb:30:d6:57:bb:9f:d1:be:68:
         0c:6e:87:a2:63:f6:9f:df:2a:95:b5:07:35:02:ca:a8:79:c3:
         84:ff:d0:7d:04:00:9a:ec:8e:90:9a:81:88:58:63:cf:47:8f:
         17:79:da:95:93:6c:b1:6e:39:95:1d:f6:1c:de:ad:c5:6f:3f:
         41:1f:06:69:2b:52:cc:4e:39:e7:1d:27:11:bb:99:18:f0:14:
         1e:bb:ac:00:a5:70:46:d3:88:bc:5e:b3:b4:32:76:34:ac:88:
         f6:f0:1c:04:5f:05:b4:72:b1:59:7c:26:dc:5b:c2:59:77:24:
         ad:19:25:7b:2a:dc:54:81:52:84:47:80:ad:a2:2f:0a:66:d8:
         ec:e7:9c:1a:51:0e:13:d3:ec:4f:ad:ab:f9:37:c4:a9:01:cc:
         95:c8:66:01:f6:2f:2b:d3:66:1f:38:a9:41:41:65:59:28:78:
         43:da:5d:1b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUE3MEUxMTAvBgNVBAUTKEQ0MzlFRUQ2MEQzMTk3MDk4NzI0NzRCOTA3MDY2MzA0
NzNCNkRFNUUwHhcNMjUwODIzMDI0NzIxWhcNMjUwODMwMDI0NzIxWjAYMRYwFAYD
VQQDEw02OGE5MmJiOS05Njc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuaQryO4g38GxhjLUAHulYlLhVbUSUEZVSK25nmR4DlToFR9ewlsRkVe2LDi1
OsiNFU0enfYnatnPLGh7h6vC/PYLDDCZhW3ketP+05isbI2Kex3zsVVK8Y3QF1JL
OCQslNGb4NzpXtuorQ8nLKGEdRm96qmcwpiqa1jp7t1HVKqsDZuHapGHPhurOFm3
7Hc7MeNRKX3LFGKBkJ+4lPjE65HEQ43kyO2VhwQTZWcjT52sgP/lY4+pqUEAks4C
qlM30FPHu87114ZGks2ftN7gpT5wBE1dcIIWO+PQsRnd/mu3Ys+Zvh/QZIy5RVcR
wPYtUyrqt2J9xRsoW9p0YsF/vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIKFJy5l
/R4UZzW1KX64My152/tDMB8GA1UdIwQYMBaAFNQ57tYNMZcJhyR0uQcGYwRztt5e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTcwRS8wMDA4M0ZBQzlE
NTcxMUVEOUY5ODk1MzBDNEY5QUUwMi8xRG51MWcweGx3bUhKSFM1QndaakJITzIz
bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFEbnUxZzB4bHdtSEpIUzVCd1pqQkhPMjNsNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QTcwRS8wMDA4M0ZBQzlENTcxMUVEOUY5ODk1MzBDNEY5QUUwMi8xRG51MWcweGx3
bUhKSFM1QndaakJITzIzbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCcs6eTMtl9gXEavhBkJSdut71siI6N9WnUsy0EunL9WptsheNT0B2D
Bkause4pfzTjgWgqa3Bhoea9cEWL/R6JxZIGamc0pMGe0PmtmiPtqNDrMNZXu5/R
vmgMboeiY/af3yqVtQc1AsqoecOE/9B9BACa7I6QmoGIWGPPR48XedqVk2yxbjmV
HfYc3q3Fbz9BHwZpK1LMTjnnHScRu5kY8BQeu6wApXBG04i8XrO0MnY0rIj28BwE
XwW0crFZfCbcW8JZdyStGSV7KtxUgVKER4Ctoi8KZtjs55waUQ4T0+xPrav5N8Sp
AcyVyGYB9i8r02YfOKlBQWVZKHhD2l0b
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:56:35 2025 by rpki-client